$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json) Hash identifier: GfJB8iZowwPaZ1yuHMGr5en7R+D33hOYhkIrYFv+JBg= Subject key identifier: B9:98:FF:C8:5F:F7:E5:A5:7D:36:06:31:61:70:25:EC:1B:CD:85:1D Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft Manifest number: 54 Signing time: Sat 19 Jul 2025 07:33:50 +0000 Manifest this update: Sat 19 Jul 2025 07:33:49 +0000 Manifest next update: Sat 26 Jul 2025 07:33:49 +0000 Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: T/g1Y+qHcyDECBlx0gAR4Jo09+z//zCM8X6OHV8Dw5U=) 2: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: WTYmLvNpyq/A5Kbra5mtKRBFCjY1e4fS3rGmshvrNGY=) 3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: d1zImNClufU6mQa0qsoJOx/6gPAzww6pSPXhwifVLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: Jul 19 07:33:49 2025 GMT Not After : Jul 26 07:33:49 2025 GMT Subject: CN=687b4a5d-8e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:e9:53:47:6f:ab:aa:43:55:4c:28:ad:f2: c0:02:c2:41:54:66:04:d6:2c:34:7d:40:83:36:32: f8:45:8c:cb:2c:95:66:55:cc:2a:91:e8:b0:2b:30: 99:b1:d5:36:cb:2c:93:bb:ce:86:c9:01:1e:55:3a: 0c:42:c9:07:79:29:a1:89:32:c4:07:58:b8:64:6b: e2:00:b1:b7:73:b8:89:ae:b0:94:d4:98:4f:b2:57: 10:c9:56:d1:03:8d:18:da:60:d7:da:ed:9f:e6:c3: 7d:fc:47:28:3b:0e:b9:f0:3d:6a:b8:ac:0d:e8:b3: 9f:eb:fb:d1:b7:40:c4:59:1d:d1:df:53:82:2b:c4: 31:98:be:0b:b3:d4:d7:91:3e:1e:ad:c6:0e:6f:d5: 46:20:9a:bd:ea:48:33:fe:b5:e7:03:a2:03:3e:38: 15:99:7d:c2:53:99:01:f3:82:bd:cd:fa:5a:07:a4: 83:95:32:02:a1:73:25:79:b5:6e:7a:8d:8d:1f:3a: 40:37:df:48:de:1d:b1:da:b8:4d:82:ad:3b:fc:a2: 67:55:2f:be:e5:24:b7:96:23:37:dd:30:0e:4c:01: 91:d3:60:2f:d7:d6:da:be:4d:65:4f:d7:cd:7a:ab: 6d:6e:10:39:1f:ff:8e:e4:14:4c:d9:29:56:fe:6b: 58:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:98:FF:C8:5F:F7:E5:A5:7D:36:06:31:61:70:25:EC:1B:CD:85:1D X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:86:2f:4d:6d:4d:48:82:49:6b:85:43:cd:19:a8:d1:07:bd: 29:c8:20:2b:2d:65:64:43:42:73:d8:8f:85:31:7a:77:6a:0f: f6:b3:08:5b:c0:47:54:5b:b2:ed:47:69:4b:aa:09:f0:79:8f: 7d:e1:77:cd:bc:f0:bd:63:66:c0:ed:3d:11:b5:aa:a6:6f:0d: 17:93:d6:a8:c0:6b:64:b3:9c:f3:54:8a:e2:92:a7:aa:0d:ad: b7:5d:1a:7d:37:af:c7:37:2f:b5:19:c1:bc:03:d0:f5:84:62: 31:6a:6d:7d:46:a9:73:ad:de:c8:a5:e7:14:96:ce:df:ce:1f: 44:0d:4e:16:46:d7:9d:69:c2:d6:a9:95:e4:23:1c:06:b4:7d: d4:66:67:e3:81:04:1f:7f:c7:18:e2:1b:8a:d7:61:ed:a2:dd: a2:9b:69:14:ba:45:b3:01:b1:83:2c:77:60:c1:82:06:f5:02: c5:54:42:27:7f:d4:3b:ab:c7:01:cc:5e:30:a1:37:e9:9e:92: 7c:3e:17:44:eb:67:e9:e9:0e:a8:b9:42:8f:c3:17:18:ec:b2: 5b:a3:32:3f:71:e4:b4:52:f6:b8:b3:45:f3:b2:99:e8:1a:86: 2e:6a:1d:26:0d:60:80:a5:db:57:06:d6:99:9d:d7:ae:eb:ab: 34:4f:72:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjFDQzExMC8GA1UEBRMoNDQ2RkFGOTIzQkVCQUY5NjM1NzI4N0ZFMjUwOTkxQzc1 NDkxNDU0RDAeFw0yNTA3MTkwNzMzNDlaFw0yNTA3MjYwNzMzNDlaMBgxFjAUBgNV BAMTDTY4N2I0YTVkLThlNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC61OlTR2+rqkNVTCit8sACwkFUZgTWLDR9QIM2MvhFjMsslWZVzCqR6LArMJmx 1TbLLJO7zobJAR5VOgxCyQd5KaGJMsQHWLhka+IAsbdzuImusJTUmE+yVxDJVtED jRjaYNfa7Z/mw338Ryg7DrnwPWq4rA3os5/r+9G3QMRZHdHfU4IrxDGYvguz1NeR Ph6txg5v1UYgmr3qSDP+tecDogM+OBWZfcJTmQHzgr3N+loHpIOVMgKhcyV5tW56 jY0fOkA330jeHbHauE2CrTv8omdVL77lJLeWIzfdMA5MAZHTYC/X1tq+TWVP1816 q21uEDkf/47kFEzZKVb+a1g1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuZj/yF/3 5aV9NgYxYXAl7BvNhR0wHwYDVR0jBBgwFoAURG+vkjvrr5Y1cof+JQmRx1SRRU0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzNBRkMzM0UyRUY2 MzExRUZCRjY0QUI2QUM0RjlBRTAyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJV MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkctdmtqdnJyNVkxY29mLUpRbVJ4MVNSUlUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MUNDLzNBRkMzM0UyRUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL1JHLXZranZycjVZ MWNvZi1KUW1SeDFTUlJVMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABSGL01tTUiCSWuFQ80ZqNEHvSnIICstZWRDQnPYj4UxendqD/azCFvA R1Rbsu1HaUuqCfB5j33hd8288L1jZsDtPRG1qqZvDReT1qjAa2SznPNUiuKSp6oN rbddGn03r8c3L7UZwbwD0PWEYjFqbX1GqXOt3sil5xSWzt/OH0QNThZG151pwtap leQjHAa0fdRmZ+OBBB9/xxjiG4rXYe2i3aKbaRS6RbMBsYMsd2DBggb1AsVUQid/ 1DurxwHMXjChN+meknw+F0TrZ+npDqi5Qo/DFxjsslujMj9x5LRS9rizRfOymega hi5qHSYNYICl21cG1pmd167rqzRPciM= -----END CERTIFICATE-----Generated at Sun Jul 20 19:20:49 2025 by rpki-client